]> git.ipfire.org Git - thirdparty/bind9.git/commit
Fix intermittent test failure dnssec system test
authorMatthijs Mekking <matthijs@isc.org>
Tue, 11 Jun 2024 11:08:30 +0000 (13:08 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Tue, 30 Jul 2024 10:33:45 +0000 (10:33 +0000)
commite874632488731ce9cf07696db804ca40eb8a7255
tree18c450e6dc59071d8ad6f5e1ec484bb1c7e3851d
parentd9d882816aa9dc58cf69d9ce63a1650c476c5834
Fix intermittent test failure dnssec system test

The updatecheck-kskonly.secure zone is being used to test dynamic
updates while the KSK is offline. It ensures that the DNSKEY RRset
will retain the RRSIG record, while the updated data is being signed
with the currently active ZSK.

When walking through ZSK rollovers, ensure that the newest ZSK (ZSK3)
is published before doing the dynamic update, preventing timing
related test failures.

Also fix the test log line ($ZSK_ID3 was not yet created at the time
of logging).
bin/tests/system/dnssec/tests.sh